Your MCP server can read ~/.ssh. Here is how I put it in a jail

The config line nobody reads twice Somewhere in your Claude Desktop, Cursor or Claude Code config there is a line like this: "filesystem": { "command": "npx", "args": ["-y", "@modelcontextprotocol/server-filesystem", "/home/me/projects"] } Read it the way your operating system reads it. "Download whatever is on npm under this name right now, don't... Weiterlesen: Your MCP server can read ~/.ssh. Here is how I put it in a jail